Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_jYcVxl_JySWRfIFm7AI_nbi9ME.roa
File: _jYcVxl_JySWRfIFm7AI_nbi9ME.roa (raw, json)
Hash identifier: Ti4H+VM0gakgiEvBCWJhzT+ghvrMO56acEiDhc+f3EI=
Subject key identifier: FE:36:1C:57:19:7F:27:24:96:45:F2:05:9B:B0:08:FE:76:E2:F4:C1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185AB9F1A10E1B29E803A57063410CCC7E2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_jYcVxl_JySWRfIFm7AI_nbi9ME.roa
Signing time: Fri 13 Jan 2023 14:53:28 +0000
ROA not before: Fri 13 Jan 2023 14:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 09:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:9f:1a:10:e1:b2:9e:80:3a:57:06:34:10:cc:c7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 13 14:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe361c57197f27249645f2059bb008fe76e2f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:e8:f2:09:b4:0f:b4:5c:50:e9:97:a2:96:
a3:b7:1c:78:fe:5a:a8:12:ef:c0:c9:f2:2e:d1:48:
6e:00:f0:8f:be:9c:ce:1d:c8:8d:89:1e:d0:38:08:
ea:21:2f:ec:06:a9:8a:06:d9:b7:f7:99:de:d8:c0:
c1:16:cd:08:20:57:a6:f1:23:cc:af:da:aa:5c:f8:
ba:aa:a0:41:20:b4:4e:13:6b:f1:de:4f:47:f4:65:
5b:55:65:15:cb:d3:1f:ea:fc:ed:46:1d:3f:60:85:
70:27:86:2f:e3:ea:6e:f8:fd:5b:12:01:0e:15:ac:
71:e2:1a:e8:1f:2b:74:6e:3d:f3:0a:a1:f4:68:5f:
55:d3:7a:84:4d:7b:90:5e:d1:cc:aa:26:38:6d:75:
15:0c:b1:a1:20:f8:4b:ee:38:49:1e:b1:b7:72:f5:
12:a0:fc:85:ab:22:0b:d5:f7:d8:2e:39:e4:df:60:
35:81:0e:bc:6f:d1:4b:33:76:b3:58:92:65:2b:5f:
5a:1e:6d:75:96:4c:b0:41:d7:17:38:5c:98:a5:8c:
bc:fc:77:00:1a:c5:f4:d7:83:30:d4:c2:bb:63:5a:
5b:98:30:d8:95:1b:45:5f:38:86:35:8e:8d:a1:2a:
2a:17:59:24:7d:8f:dd:36:a3:7c:2b:c3:ee:9d:a1:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:1C:57:19:7F:27:24:96:45:F2:05:9B:B0:08:FE:76:E2:F4:C1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_jYcVxl_JySWRfIFm7AI_nbi9ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
5.105.76.0/24
5.105.137.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:65:00:64:75:3e:f2:b8:57:2e:d2:c8:c4:8a:7f:6f:d9:94:
1b:67:c8:fc:2f:bc:21:87:5f:9b:8e:86:d9:2c:18:31:17:7d:
9d:4c:74:ee:e9:a2:d0:ce:8e:1e:66:d8:45:d1:c6:64:17:43:
c3:3a:c0:e1:dc:48:87:ec:05:d0:5d:75:39:51:8f:46:5a:aa:
f9:c8:ce:58:24:8a:36:72:cd:f0:d7:0e:04:b1:50:57:46:6f:
2f:7e:4c:fd:ae:82:46:d4:8a:6d:b1:2d:ef:16:c2:13:3d:2b:
c0:bc:bf:b7:ea:6a:36:5a:0f:7f:45:ce:dd:ef:5a:87:e2:12:
4d:6a:43:07:91:f6:05:52:6a:65:48:db:0a:3b:3e:9d:f8:cf:
ad:2b:0d:2a:29:b3:67:5f:6e:1d:4f:bc:e6:ef:7c:94:96:ac:
7f:01:20:f7:a9:da:07:7c:e6:64:b9:a5:e2:e0:9c:a1:a8:82:
52:f3:77:09:c6:65:f1:d4:12:2a:b4:6a:9f:e3:ac:68:b4:49:
6d:45:78:2d:17:e7:95:26:67:a4:08:ae:e7:b5:3d:41:70:d0:
92:ec:49:e0:99:13:50:2d:6b:ab:ee:79:07:2b:77:f8:2f:58:
a1:94:4c:74:35:14:b0:77:43:d4:79:97:b7:30:06:9b:41:c5:
da:b6:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:28 2024 by rpki-client on console-fra.rpki-client.org